CVE detail
CVE-2019-1053
An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would require unprivileged execution on the victim system. The security update addresses the vulnerability by correctly validating folder shortcuts.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 13.9 · diversity 8.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
3 source links · newest first
- June 2019 Patch Tuesday: A little something for everybodyHelp Net Security
For June 2019 Patch Tuesday, Microsoft has fixed a whooping 88 CVE-numbered vulnerabilities, Adobe has plugged many critical security holes in ColdFusion and Flash Player, and Intel has released security updates and mitigations for multiple products. Adobe’s fixes The Flash Player updates plug one but critical code execution flaw (CVE-2019-7845). Users of the ColdFusion web application development platform are getting patches for three critical code execution bugs and should consult the offered tech notes to … More →
newswww.helpnetsecurity.comJun 12, 2019, 8:36 AM Microsoft releases Patch Tuesday security updates for June 2019 that address 88 vulnerabilities in Windows OS and other products. Microsoft Patch Tuesday security updates for June 2019 address 88 vulnerabilities in Windows OS and other products of the tech giant (Internet Explorer, Microsoft Edge browser, Microsoft Office and Services, ChakraCore, Skype for Business, Microsoft Lync, […]
newssecurityaffairs.comJun 12, 2019, 7:55 AMMicrosoft’s Patch Tuesday updates for June 2019 resolve nearly 90 vulnerabilities, including the privilege escalation flaws disclosed recently by a researcher known as SandboxEscaper.
newswww.securityweek.comJun 12, 2019, 7:54 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2023-21760CVSS 7.1 · High
Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2022-21997CVSS 7.1 · High
Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2021-43238CVSS 7.8 · High
Windows Remote Access Elevation of Privilege Vulnerability
- CVE-2021-26425CVSS 7.8 · High
Windows Event Tracing Elevation of Privilege Vulnerability
- CVE-2021-26887CVSS 7.8 · High
<p>An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located…
- CVE-2021-26862CVSS 7.0 · High
Windows Installer Elevation of Privilege Vulnerability